Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

CCTV connection problems

Ive put cisco 877 routers in my depot offices and users behind the cisco router cant connect to any of our CCTV servers remotely. I think it might be a Nat issue but cant be sure. Everything works correctly when connected behind a Draytek Vigor, so there must be a fault on the cisco config somewhere. Can anyone help?

6 REPLIES
Hall of Fame Super Silver

Re: CCTV connection problems

Hello Colin,

if you can post a filtered(without public ip addresses passwords, ..) config of one of your 877 and if you can provide some details about the CCTV server (what protocol are they using ? are they sending multicast frames if so you need to turn on multicast routing) you can find some help on the forum.

If your CCTV are using H.323 they might find some dynamic ports closed if you are using CBAC (ip inspect) and NAT.

Hope to help

Giuseppe

New Member

Re: CCTV connection problems

Hi Guiseppe,

Please find my config attached. The CCtv server runs on a remote LAN and various udp and tcp protocols are forwarded from the draytek broadband router to the server,ports tcp/udp 2000-2006, tcp/udp 3001. When I try to connect using the remote viewing application from behind the Cisco 877(which is on a remote subnet) only one TCP session is established, and the application hangs.

Could it be the IOS version or dsl firmware that's causing the problem. I hope that you can help me because we need this operational during the night in case of intruder break ins. Hope this makes sense!

Thanks

Colin...

Hall of Fame Super Silver

Re: CCTV connection problems

Hello Colin,

from waht I see in your config I would add

access-list 2 permit 10.0.0.0 0.0.255.255

because your inside interface has the following config:

interface Vlan1

ip address 10.0.2.86 255.255.0.0

ip nat inside

ip virtual-reassembly

!

anc current acl 2 says:

access-list 2 permit 192.168.0.0 0.0.0.255

So NAT cannot work because it uses acl 2 to decide what to translate to dialer ip address:

ip nat inside source list 2 interface Dialer0 overload

Or change vlan1 ip address in 192.168.0.X 255.255.255.0

Hope to help

Giuseppe

New Member

Re: CCTV connection problems

sorry vlan 1 address is 192.168.0.1/24, 10.0.2.86/16 was there so I could configure on 10.0.0.0/16 subnet, my fault, that isn't the reason its not working!

Hall of Fame Super Silver

Re: CCTV connection problems

Hello Colin,

I was thinking it was too evident to be true !

Best Regards

Giuseppe

New Member

Re: CCTV connection problems

so could it be the ios version

271
Views
0
Helpful
6
Replies